CVE-2026-74857 | Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0 Auth API improper authentication

A vulnerability has been found in Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0 and classified as very critical. This affects an unknown part of the component Auth API. The manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-74857. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More